domain-assessment

Subdomain discovery and port scanning automates finding all subdomains and open ports on a target domain. This Skill coordinates both tasks to build a comprehensive attack surface inventory, eliminating manual reconnaissance and identifying public-facing assets and services automatically.

Map attack surfaces by automating subdomain discovery and port scanning across your target domain. This Skill uses multiple techniques including passive DNS, brute-forcing, and certificate transparency to systematically identify all external assets before a penetration test begins.

Yes. This Skill systematically discovers subdomains using multiple techniques: passive DNS lookups, brute-forcing, and certificate transparency logs. Combined with port scanning, it provides complete visibility into all public-facing infrastructure for a domain.

Manual domain reconnaissance is time-consuming and often incomplete, leading to missed attack vectors and gaps in understanding your external footprint. Automated reconnaissance ensures comprehensive initial assessment by efficiently coordinating subdomain discovery and port scanning.

This Skill aggregates subdomain discovery and port scanning results into a centralized attack surface inventory. It identifies open ports and services across all discovered subdomains, providing a complete picture of exploitable external infrastructure.